Thanks to all who replied. Bind now defaults to a high number port for its own queries of oter nameservers. Thus am I drug kicking and screaming into the 21st century. (But at least my mail client uses MX records!)